PAM and Kerberos

Qury · 10-04-2018, 02:55 AM

Quote:

Originally Posted by volkerdi

... As far as Slackware 15.0 goes, I've been testing PAM and Kerberos here and have given quite some thought to trying to get them merged (or at least in /testing) so that we can have proper support for Active Directory and NFS. ...

Hi Pat,
Have you got anywhere with the above? If you are still considering to add the above to testing i would be more than happy to take it for a spin and provide feedback.

Currently i use ivandi's SlackADS (with updated versions) on current and that works fine.

cwizardone · 10-05-2018, 10:55 AM

Hear, hear!

Slax-Dude · 10-09-2018, 10:19 AM

I would also be interested in an update from Pat on these tests.

Qury · 11-12-2019, 03:53 AM

@Pat

Are you still considering PAM, Kerberos, AD friendliness or is this out of the question for the next release?

Slax-Dude · 11-12-2019, 05:23 AM

I think Ivandi discontinued work on integrating PAM with Slackware, although he was kind enough to leave us an archive of his past efforts here: http://www.bisdesign.ca/ivandi/slackware/archive/

Qury · 11-12-2019, 07:11 AM

i was inquiring about Pat's thoughts on making these part of Slackware as opposed to 3rd party efforts.

volkerdi · 11-12-2019, 12:44 PM

Good to hear that there will be interest in testing this :-)

drumz · 11-12-2019, 01:30 PM

Quote:

Originally Posted by volkerdi

Good to hear that there will be interest in testing this :-)

I feel like we are all mice and Pat is the cat.

... I mean that in the most loving way possible, by the way

Edit: forgot to mention, my workplace just recently switched over to AD, so maybe I'll give it a spin, too. Right now I'm "off the grid".

upnort · 11-12-2019, 03:47 PM

Quote:

I feel like we are all mice and Pat is the cat.
... I mean that in the most loving way possible, by the way

As BDFL, perhaps that makes Pat the Top Cat.

Slax-Dude · 11-13-2019, 03:58 AM

Quote:

Originally Posted by volkerdi

Good to hear that there will be interest in testing this :-)

Sign me up as a beta tester ;-)

bifferos · 11-13-2019, 04:56 AM

Quote:

Originally Posted by volkerdi

Good to hear that there will be interest in testing this :-)

Expect a donation if you get this to beta, Mr V. If it works on our contorted AD setup it'll work anywhere.

Qury · 11-13-2019, 06:01 AM

Quote:

Originally Posted by volkerdi

Good to hear that there will be interest in testing this :-)

Most certainly! Looking forward to it.

orbea · 11-13-2019, 07:54 AM

Quote:

Originally Posted by volkerdi

Good to hear that there will be interest in testing this :-)

Assuming you do add pam/kereberos I hope there is also room for users to opt out.

Slax-Dude · 11-13-2019, 08:34 AM

Quote:

Originally Posted by orbea

Assuming you do add pam/kereberos I hope there is also room for users to opt out.

Sure.
Like today you can do as ivandi and recompile several stock packages to include PAM support, you would be able to recompile them to exclude PAM...
Open source is freedom.

orbea · 11-13-2019, 09:20 AM

Now that you made that point I suspect what ivandi was doing is going to be a lot easier than doing the reverse given how kereberos likely will hook itself into many packages.